Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
File:                     A2G_1FDhLplUBKROs3ovnkK_4Hw.mft (raw, json)
Hash identifier:          bQGY9DAqXtpZww8oWYiIFomYrCM3fQsnN3Cc/Ibk7CY=
Subject key identifier:   C7:1C:DA:1C:23:D1:22:D7:46:F8:E2:52:59:48:D8:3F:6E:6C:26:06
Authority key identifier: 03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
Certificate issuer:       /CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Certificate serial:       01974C3235D21192972CB3AA8F8B3262A703
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
Manifest number:          01FF
Signing time:             Sat 07 Jun 2025 21:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:48 +0000
Files and hashes:         1: A2G_1FDhLplUBKROs3ovnkK_4Hw.crl (hash: WdpgKchZgtD+wXH2VzkTza7Y3BSbrbiJrg1R/cZgbvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:32:35:d2:11:92:97:2c:b3:aa:8f:8b:32:62:a7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
        Validity
            Not Before: Jun  7 21:00:48 2025 GMT
            Not After : Jun  8 21:00:48 2025 GMT
        Subject: CN=c71cda1c23d122d746f8e2525948d83f6e6c2606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:18:7a:93:cc:30:2a:69:2d:87:b9:8f:04:
                    ff:22:e4:77:fb:48:83:c0:2a:26:9b:61:ae:47:91:
                    c7:be:e6:d2:1a:c5:77:b7:17:ce:fb:2a:05:a4:38:
                    82:53:a3:ad:dc:d7:d5:c4:2a:96:08:d7:35:33:6d:
                    5a:cb:14:af:f9:ef:0a:06:cf:15:e5:28:58:6d:5f:
                    53:fa:a3:7b:d4:ac:c5:92:2c:8f:42:1c:c4:80:05:
                    61:7f:f7:ad:7e:f2:f1:12:b0:43:ca:af:e9:7f:0a:
                    57:63:bb:b8:1a:c3:6c:be:ee:5d:43:97:4d:53:ee:
                    bd:3f:f8:43:fa:a6:5d:d4:b9:3c:1e:e6:a2:12:e4:
                    af:f3:16:cf:f7:a2:20:10:d9:36:ae:31:df:42:fe:
                    4b:2a:c4:1e:55:c1:2e:5e:67:b5:db:7b:3b:69:66:
                    68:79:9d:04:d3:5d:25:0d:f1:f1:c2:a8:66:dd:cb:
                    89:86:d8:c0:4b:99:ce:61:55:03:c5:89:f2:77:42:
                    73:65:8f:93:58:9d:fc:c8:2f:ce:cb:64:d1:5d:7e:
                    3f:73:1a:6c:c0:d9:15:bf:05:94:48:f4:48:74:98:
                    a8:ea:a0:00:4c:ff:b3:61:c8:e6:ba:ad:d1:99:ba:
                    66:a0:9e:f1:ac:75:f9:05:65:f0:e9:5c:96:eb:1b:
                    11:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1C:DA:1C:23:D1:22:D7:46:F8:E2:52:59:48:D8:3F:6E:6C:26:06
            X509v3 Authority Key Identifier:
                keyid:03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:f6:67:de:76:93:bc:7d:a1:eb:8b:d3:4a:f9:f6:bc:2b:9e:
         41:d3:bc:6c:63:b5:c7:75:95:a8:50:36:da:d9:00:2f:79:56:
         dc:7d:04:4b:f6:b8:f3:83:4e:e4:13:b6:d4:49:e2:2d:87:3f:
         6e:05:6f:4f:fe:5c:1b:f7:0a:61:e1:64:5c:29:d4:3e:0a:17:
         43:01:53:1b:3a:40:b6:a0:fa:ac:d9:7a:fa:b5:33:77:25:c3:
         77:23:7f:74:6d:3f:a1:8c:8b:72:78:6e:12:1e:2c:77:4c:e2:
         b5:8e:0f:7c:b4:62:67:ab:40:c8:4b:61:37:b6:13:ad:ea:c5:
         07:e5:bb:a2:a6:89:a2:29:ee:51:e1:b5:81:c3:74:e5:77:c6:
         3f:3d:e7:77:6b:aa:45:0e:93:9f:47:ba:ae:6c:8e:a8:57:de:
         74:12:4a:11:4a:38:c0:9c:d9:b6:7c:33:21:5b:21:09:cd:b4:
         8d:f7:b9:91:d5:f4:6e:cd:f5:39:3c:84:81:0c:db:06:7e:84:
         8d:fe:cf:89:5c:32:e6:e3:60:b5:c3:9c:a9:e0:27:de:a6:1f:
         79:c9:a8:6f:67:a1:36:6b:e4:e4:d6:cf:a7:85:4c:51:0d:d6:
         1c:e9:40:08:84:4c:be:8f:35:2b:fc:1f:2f:23:f9:55:bd:ce:
         61:83:b7:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMjXSEZKXLLOqj4syYqcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNjFiZmQ0NTBlMTJlOTk1NDA0YTQ0ZWIzN2EyZjllNDJi
ZmUwN2MwHhcNMjUwNjA3MjEwMDQ4WhcNMjUwNjA4MjEwMDQ4WjAzMTEwLwYDVQQD
EyhjNzFjZGExYzIzZDEyMmQ3NDZmOGUyNTI1OTQ4ZDgzZjZlNmMyNjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLEYepPMMCppLYe5jwT/IuR3+0iD
wComm2GuR5HHvubSGsV3txfO+yoFpDiCU6Ot3NfVxCqWCNc1M21ayxSv+e8KBs8V
5ShYbV9T+qN71KzFkiyPQhzEgAVhf/etfvLxErBDyq/pfwpXY7u4GsNsvu5dQ5dN
U+69P/hD+qZd1Lk8HuaiEuSv8xbP96IgENk2rjHfQv5LKsQeVcEuXme123s7aWZo
eZ0E010lDfHxwqhm3cuJhtjAS5nOYVUDxYnyd0JzZY+TWJ38yC/Oy2TRXX4/cxps
wNkVvwWUSPRIdJio6qAATP+zYcjmuq3RmbpmoJ7xrHX5BWXw6VyW6xsRewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcc2hwj0SLXRvjiUllI2D9ubCYGMB8GA1UdIwQY
MBaAFANhv9RQ4S6ZVASkTrN6L55Cv+B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTJHXzFGRGhMcGxVQktST3Mzb3Zua0tfNEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iZWM3ODMtNWI0OC00OTM4LTg3ZTct
NzM3MWI3ZDFhMTA3LzEvQTJHXzFGRGhMcGxVQktST3Mzb3Zua0tfNEh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iZWM3ODMtNWI0OC00OTM4LTg3ZTctNzM3MWI3ZDFhMTA3
LzEvQTJHXzFGRGhMcGxVQktST3Mzb3Zua0tfNEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzfZn3naT
vH2h64vTSvn2vCueQdO8bGO1x3WVqFA22tkAL3lW3H0ES/a484NO5BO21EniLYc/
bgVvT/5cG/cKYeFkXCnUPgoXQwFTGzpAtqD6rNl6+rUzdyXDdyN/dG0/oYyLcnhu
Eh4sd0zitY4PfLRiZ6tAyEthN7YTrerFB+W7oqaJoinuUeG1gcN05XfGPz3nd2uq
RQ6Tn0e6rmyOqFfedBJKEUo4wJzZtnwzIVshCc20jfe5kdX0bs31OTyEgQzbBn6E
jf7PiVwy5uNgtcOcqeAn3qYfecmob2ehNmvk5NbPp4VMUQ3WHOlACIRMvo81K/wf
LyP5Vb3OYYO33Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:19:27 2025 by rpki-client